Privacy Policy

OUR PRIVACY POLICY IS SET OUT BELOW. 

Introduction 

This website, www.dupanoi.ro, is managed by a member of the Coca-Cola HBC group of companies (namely Coca-Cola HBC Romania SRL). Coca-Cola HBC Romania SRL is committed to protecting the privacy of all visitors to the www.dupanoi.ro website and to protecting all personal data that you may provide to us. 

Through this Policy, Coca-Cola HBC Romania SRL, with its registered office in Voluntari, București Nord Road 10, Building O23, floor 1, Ilfov county, 077190, Romania, registered with the Trade Register under no. J23/2300/2009, with CUI RO 474152, undertakes to comply with the requirements of national legislation and the provisions of "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC" ("GDPR"). 

All references to "we", "our" or "the company" in this policy shall be interpreted as references to Coca-Cola HBC Romania SRL. 

We are providing you with this Privacy Policy to help you understand what we do with all the personal data we collect from you.  

This privacy policy notice covers the following areas: 

  • What personal data is
    • The personal data we collect from you and how we use it
    • Cookie policy 
    • Who are the recipients of your personal data 
    • How we protect your personal data 
    • Contacting us and your rights to access and update your personal data 
    • How changes to this Privacy Policy and Cookie Policy will be made 

WHAT IS PERSONAL DATA? 

Personal data is information about an identifiable individual, as defined by applicable laws, such as name, email address or telephone number. 

PERSONAL DATA WE COLLECT FROM YOU AND HOW WE USE IT 

In general, you can visit the website without telling us who you are or revealing any information about yourself. Our servers collect the source IP addresses of visitors for IT purposes, which allow you to connect to our platform to provide our services, not their email addresses. 

  

Data subject 

Data collected 

Purpose of collection 

Visitor to our website 

IP address, domain name, browser and operating system version, internet traffic data, location data, web logs 

Analysis of user behaviour on the website, recording and reporting of user activity on the website in a specific session, limiting the request rate to improve efficiency 

  

For all data processing for which you have given us your consent, you have the right to refuse or withdraw your consent at any time without any negative effect on any relationship you have with us. 

DISCLOSURE. WHO THE RECIPIENTS OF YOUR PERSONAL DATA ARE 

Your Personal Data may be disclosed as follows: 

Categories of recipients 

companies within the Coca-Cola group and/or third-party service providers who process data on our behalf 

any third-party service providers that any Coca-Cola HBC subsidiary/affiliate engages in the process of providing the services requested by you or us for the purposes mentioned above  

  

If you provide us with personal information, you consent to its disclosure. 

IS YOUR PERSONAL DATA TRANSFERRED OUTSIDE THE EU? 

As Coca-Cola HBC operates in many countries, your personal data may be accessed by staff or suppliers located in, transferred to and/or stored in locations outside the EU where data protection standards may be lower than those in the EU. However, we always try to ensure that your personal data receives the same level of protection it would have received if it had remained within the EU, including ensuring that it is kept secure and only used in accordance with our instructions and for the agreed purposes. 

Certain countries outside the EU have been certified by the European Commission as offering a level of protection equivalent to that provided by EU data protection laws, and therefore no additional safeguards are required when exporting personal data to these jurisdictions (for the full list, see http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm). In countries that do not have these approvals (such as Russia), we will either ask for your consent to the transfer or transfer the data in accordance with contractual conditions approved by the European Commission that will impose equivalent data protection obligations directly on the recipient, unless applicable data protection laws allow us to make these transfers without fulfilling these formalities. 

Please contact us in accordance with the "Contact Us" section below if you would like to see a copy of the specific safeguards applicable to the export of your personal data. 

All parties outside the EU to whom personal data will be transferred process data, fulfil and deliver orders, and provide support services on our behalf. We may also share aggregated information about the use of our website with third parties, but this will not include information that can be used to identify you. We reserve the right to disclose your personal data in accordance with legal requirements or when we believe disclosure is necessary to protect our rights or the company in a legal proceeding, court order, request from a regulatory authority, or any other legal process served on us. 

Except as required by law, we will not otherwise share, sell or distribute any of your personal data without your consent. 

Finally, if our company is acquired by, sold to, or merged with another company, your data will be disclosed to our new partners or owners. 

HOW DO WE PROTECT YOUR PERSONAL DATA? 

Users aged 16 or younger 

If you are 16 years of age or younger, you must obtain the consent of your parent or guardian before providing us with personal data. Users who do not have this consent should not provide us with personal data. 

OTHER WEBSITES 

Our websites contain links to other websites that are independent of our control and are not covered by this Privacy and Cookie Notice. If you access other sites using the links provided by us, the operators of those sites may collect information from you that they will use in accordance with their own privacy policies, which may differ from ours. We do not assume any responsibility or liability for their policies or their processing of your personal data. We encourage you to read the privacy and cookie notices and terms and conditions of any websites you access to which we provide links, to which we refer, or which serve as an interface before submitting any personal data to these third-party websites. 

SECURITY OF COLLECTED DATA AND DATA RETENTION 

We use strict physical, electronic, and administrative security measures to protect your data from unauthorised access and from illegal processing, accidental loss, destruction, or damage, both online and offline. We will retain your data for as long as necessary for the specified purpose of collection and thereafter retain the data for as long as required by law.  

CCHBC retains personal data in an identifiable format only for the period necessary, determined by the purposes of processing for which the data is collected. 

CCHBC shall not retain personal data longer than is necessary to fulfil the identified legitimate business purposes or as long as required by applicable law. 

CCHBC establishes a retention period for personal data in accordance with relevant laws and regulations as part of its record of processing activities. 

CCHBC shall justify the requirements for retaining personal data for periods longer than the maximum retention period in accordance with business requirements and legal regulations, if necessary. 

Some data must be retained to protect the company's interests, to preserve evidence, and generally to comply with good business practices. Some reasons for retaining data include: 

Litigation 

Accident investigation 

Security incident investigations 

Legal regulations 

Preservation of intellectual property rights 

  

INTERNET TRANSFERS AND DISCLAIMER 

Although Coca-Cola HBC takes reasonable measures to protect against viruses and other harmful components, the nature of the internet makes it impossible to guarantee that your access to the website will be uninterrupted or error-free, or that this website, the servers or emails that may be sent by us are free of viruses or other harmful components. 

HOW YOU CAN CONTACT US AND YOUR RIGHTS TO ACCESS AND UPDATE YOUR PERSONAL DATA 

ACCESSING, UPDATING AND DELETING DATA 

You have the right to access the personal data we hold about you; you can also ask us to make any necessary changes to ensure that it is accurate and up to date, or to delete the personal data we hold about you. You may also inform us if you wish to restrict the processing of your data or object to the processing of your personal data that we hold. If you wish to do so, please contact us using the contact details provided in the Contact Us section below. You also have the right to transmit your personal data held by us to another service provider of your choice. 

WITHDRAWAL OF CONSENT 

Where we have asked for your consent to process your personal data, you may withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before its withdrawal. If you wish to do so, please change your selections in the cookie management module according to your preferences. You can also contact us using the contact details provided in the Contact Us section below. 

COMPLAINTS 

You have the right to lodge a complaint with the national data protection authority by submitting your complaint to the National Supervisory Authority for Personal Data Processing, whose contact details are available at: https://www.dataprotection.ro/page=contact&lang=ro   

HOW TO CONTACT US 

To formally exercise your rights regarding the personal data we process, please send a request by accessing the link below: Online Form. 

 If you have any comments, questions or requests regarding our use of your personal data or any questions regarding this Privacy and Cookie Policy, or if you are unable to submit a request via the link above, please contact us at the following email address:dataprotectionoffice@cchellenic.com . We welcome your questions and any suggestions you may have regarding our Privacy Policy. 

HOW CHANGES TO THIS PRIVACY POLICY WILL BE MADE 

Please check this Privacy and Cookie Notice periodically for information on changes to it. Although we reserve the right to modify or supplement this policy, we will notify you via this website of any significant changes at least 30 days after the date of the change and, if applicable, by email.